4520 matches found
CVE-2001-0417
The CVE-2001-0417 entry concerns Kerberos 4 (krb4) where local users can overwrite arbitrary files via a symlink attack on new ticket files. The connected records corroborate a local-privilege impact vector with a partial integrity impact, and a low overall CVSS score (2.1/10, AV:L/AC:L/Au:N/I:P/...
CVE-2001-0036
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...
CVE-2001-0036
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...
KTH Kerberos filesystem race condition on tickets stored in /tmp
Overview There may be a race condition during the creation of Kerberos ticket files in the /tmp directory. This race condition may allow intruders with local access to the system to gain root privileges. Description During the creation of ticket files in the /tmp directory, a sequence of calls...
Kerberos 4 4.05 5.0 - KDC Spoofing
Kerberos 4 4.05 5.0 - KDC Spoofing source: https://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service...
Kerberos 4 4.0/5 5.0 - KDC Spoofing
source: https://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service which is vulnerable to an attack whi...
SSH with Kerberos NFS Share Ticket Disclosure
The remote host is running a version of SSH which is older than or as old as version 1.2.27. There is a flaw in the remote version of this software which allows an attacker to eavesdrop the kerberos tickets of legitimate users of this service, as sshd will set their environment variable KRB5CCNAM...
CVE-2000-0575
SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS...
Kerberos security vulnerability in SSH-1.2.27
I am writing to report a security bug in SSH 1.2.27. SOFTWARE AFFECTED: SSH 1.2.27 with Kerberos authentication support compiled in i.e. "configure --with-kerberos5". I have contacted SSH Communicators Security http://www.ssh.com about this, and they have just released ssh-1.2.28, which fixes thi...
Проблема в SSH с Kerberos
При использовании Kerberos-авторизации ticket ползователя хранится в файле "none" текущей директории а не в /tmp. В том случае, когда текущий каталог находится на сетевом дисек, есть вероятность его перехвата при передаче и ксопрометации учетной записи пользователя...
MS:039A11E4-5B71-45A6-B900-586C4437E265
...
MS:2111883D-EE94-4AA3-95C1-246307F5650C
...
MS:01F4B768-6EEC-41F5-A57B-CD719C8BCC2A
...
MS:4797375A-63F7-4D20-92DA-43E8030426B9
...
MS:3846106B-54C3-4012-BC45-9039B772582B
...
MS:EB217382-5E8C-4B2F-B699-0150CDD35190
...
MS:96796677-A04B-4947-B962-EC5E48F4591B
...
MS:2738A964-23F0-472A-8E78-C24967E0FE92
...
